
The first term is simply the statistical risk \(R\)  that is usually minimized in order to tackle the learning task. The second term resembles the objective typically found in adversarial learning problems, e.g., [1]}. This term, it turns out, can be interpreted as an augmentation distribution.
